aciT.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5e15c8defcd19717e92050ad1918f6e33382c6b600d0f19662036a2ece9f1153.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_ef8889bc09b9944478bf8d6ef9b8f8bd0e4f4060c928c9d61a10af991e3a32fe
-
Size
647KB
-
MD5
8efb50679e7fb64b6b4365dff389c186
-
SHA1
6099f690a49a311eddca54ca2f4b3380486e6e95
-
SHA256
ef8889bc09b9944478bf8d6ef9b8f8bd0e4f4060c928c9d61a10af991e3a32fe
-
SHA512
0f99ee4b1050cb6416a680b7409347f1c236830620959c863b24ce71882be7b19bb6783e4f7e8d3223d7245b50fc639a40bc74f2bdc4a85ed4a47b8585e61a71
-
SSDEEP
12288:tQ1A46c9Q2mEjprwsnbWZRge2Om2k0UR+mPjNUh/BwRyC:AucmEjpr/n6TgKVObi5BdC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/5e15c8defcd19717e92050ad1918f6e33382c6b600d0f19662036a2ece9f1153
Files
-
JaffaCakes118_ef8889bc09b9944478bf8d6ef9b8f8bd0e4f4060c928c9d61a10af991e3a32fe.zip
Password: infected
-
5e15c8defcd19717e92050ad1918f6e33382c6b600d0f19662036a2ece9f1153.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 997KB - Virtual size: 997KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ